Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          eqenGV++mvMwh7tbHpC8+L8WL22WXgNGJGDwT2dj5WI=
Subject key identifier:   9F:0B:52:14:1D:2E:47:63:37:D9:BC:D6:55:D2:67:9A:6F:75:13:37
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       29E7752238652DAD7123C0E073118CF8D9993919
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:02 +0000
ROA not before:           Tue 28 May 2024 02:35:02 +0000
ROA not after:            Tue 27 May 2025 02:40:02 +0000
asID:                     64120
IP address blocks:        2803:f080:80c0::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:75:22:38:65:2d:ad:71:23:c0:e0:73:11:8c:f8:d9:99:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:02 2024 GMT
            Not After : May 27 02:40:02 2025 GMT
        Subject: CN=9F0B52141D2E476337D9BCD655D2679A6F751337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:c8:2c:1a:28:21:f9:da:ce:e1:69:74:d9:
                    75:c5:a9:ac:ca:31:01:c6:15:d8:e8:1e:ae:6a:4c:
                    0a:cd:b2:04:27:f4:75:6c:3c:c9:e5:6b:c5:13:81:
                    9b:a7:4e:91:8c:2a:8a:97:95:3a:67:1f:cd:f8:55:
                    d6:94:83:b3:70:41:64:87:21:2b:e9:e6:38:fd:81:
                    2e:33:28:d2:cb:3f:47:92:64:19:2d:68:9d:a4:be:
                    08:49:a2:bd:2f:76:b2:90:04:ff:df:3f:01:c0:4d:
                    62:25:63:a2:16:6b:e6:3d:89:ac:e4:8e:15:3a:42:
                    a0:45:c2:05:d4:93:2f:f4:ee:53:33:bf:1f:8d:98:
                    3d:77:2e:79:2e:2d:9b:bb:e7:41:d3:bf:24:05:62:
                    1c:2d:c9:7a:d4:db:7a:c5:ae:cd:3f:42:b1:be:76:
                    8a:c6:22:ac:bf:9d:2f:19:0b:47:ff:6e:fd:bd:5b:
                    20:1b:1b:2d:02:64:0f:ca:ab:e0:b0:fd:50:05:4a:
                    71:69:bd:fd:c2:54:34:38:09:04:5b:36:4a:cc:41:
                    f8:9a:55:f9:5f:c1:a0:4a:1a:e0:0e:6e:de:3b:8d:
                    99:3d:d6:77:44:1f:0b:49:bc:19:5b:3e:64:e5:eb:
                    05:f5:f1:a4:3c:a6:ca:4c:36:69:9d:11:46:ea:69:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:52:14:1D:2E:47:63:37:D9:BC:D6:55:D2:67:9A:6F:75:13:37
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:80c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:bd:cc:4a:0a:a4:b8:e5:d5:0c:55:e7:b6:83:08:31:8c:
         05:7a:55:87:c6:6f:13:99:d1:dc:81:c5:cc:3c:96:fa:33:4c:
         9b:e4:f3:bc:93:d2:d1:7c:5d:35:61:8e:dc:5d:92:fa:39:91:
         44:9e:7b:8b:7c:50:94:b0:d0:2f:cf:e1:ee:dc:2f:25:72:f3:
         a5:41:f1:ab:87:c0:d4:9f:6e:7f:d8:0a:18:bd:64:9c:da:e6:
         0b:f5:48:f1:7a:bc:2e:db:81:98:18:13:73:8a:56:ac:f3:a0:
         88:a2:7f:eb:71:cd:b8:3c:7b:bb:54:15:f2:c4:63:3c:0f:03:
         1b:a1:31:52:12:91:47:fb:10:01:a1:b4:81:c1:bd:23:b5:0a:
         11:90:05:41:c6:32:8d:8d:22:84:6f:9d:c0:a0:d2:bd:ca:9f:
         f3:dc:0e:93:06:2d:26:b0:b5:42:6b:45:09:f2:c0:1b:f2:86:
         3e:84:70:d9:73:d7:d7:4b:e0:85:6a:5f:97:91:47:50:10:a5:
         d6:79:be:1d:ad:92:72:38:3a:f3:84:75:8d:2e:27:24:51:9c:
         25:7c:df:62:4c:eb:ce:16:c0:71:b3:f4:17:6f:d8:09:b9:8f:
         c4:9c:e3:c3:2a:d9:4a:f6:a6:80:73:54:8d:eb:89:5c:22:66:
         c8:10:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org